Advisories · Technology
esaqa GmbH Psono.
Every CVE that names esaqa GmbH Psono among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
URL prefix handling permits API key read-scope bypass in Psono Server
- esaqa GmbH Psono
- Broken access control
- CVSS 5.4 Medium
User-controlled Duo host permits authenticated SSRF in Psono Server
- esaqa GmbH Psono
- Server-side request forgery (SSRF)
- CVSS 6.5 Medium
WebAuthn assertion replay permits second-factor bypass in Psono Server
- esaqa GmbH Psono
- Authentication bypass
- CVSS 5.4 Medium
File-transfer type confusion permits unauthorized repository writes in Psono Server
- esaqa GmbH Psono
- Broken access control
- CVSS 6.5 Medium
Device-code claim permits restricted token escalation in Psono Server
- esaqa GmbH Psono
- Privilege escalation